60370a6212ea83db0c5df8059c0e30d4dfc4f97d48d7b5243c460f9a5fa72b0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60370a6212ea83db0c5df8059c0e30d4dfc4f97d48d7b5243c460f9a5fa72b0f
Size

43KB
MD5

59657a5a1bc65f5bc2e1d928a4a81a2d
SHA1

aef58a9c5cf3af2136b779c5972807eca5c08ecb
SHA256

60370a6212ea83db0c5df8059c0e30d4dfc4f97d48d7b5243c460f9a5fa72b0f
SHA512

7682edd2902efcfd9b55634fa7345c6b51845a00e83824e5510104f931c30c8efa43b93ae90faf542568062e8aaf2f91cdaf0fc58d725a6f4b629f760696ee6f
SSDEEP

768:gQnUmCQ0dQ8d2TN7uxgoXvM4s8w0woFY:MmC3dQ88Tk+8vM2fBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60370a6212ea83db0c5df8059c0e30d4dfc4f97d48d7b5243c460f9a5fa72b0f

Files

60370a6212ea83db0c5df8059c0e30d4dfc4f97d48d7b5243c460f9a5fa72b0f
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/net461-Release/Microsoft.Extensions.DependencyInjection.Abstractions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ